JP2013502663A - Real-time vehicle data integrity guarantee apparatus and method, and vehicle black box system using the same - Google Patents

Abstract

The present invention relates to a black box technology for a vehicle, and the present invention converts an input data stream into block data, performs signature with a signature key, and superimposes hashing so that vehicle data stored in the black box is indispensable. Provides the benefit of guaranteeing gender in real time. In addition, by providing each vehicle black box with a unique and unique signature key, an advantage of supporting the non-repudiation function is provided. Further, it provides an advantage of supporting an error recovery function even when an error occurs in the vehicle data through a unique algorithm for generating integrity verification data.
[Selection] Figure 1

Description

  The present invention relates to a black box technology for a vehicle, and more particularly, a vehicle that supports non-repudiation prevention and error recovery functions as well as guaranteeing integrity of vehicle data stored in a black box in real time. The present invention relates to a data integrity guarantee device and method, and a vehicle black box system using the same.

  Originally, the black box meant a flight data recorder (FDR) or an airborne video recorder (AVR). Such a black box records the altitude and speed of the airplane in flight, operating conditions, internal sound of the control room, communication details with the control tower, etc., and clarifies the cause of the accident at the time of the airplane accident. It was used for the purpose of reproducing the situation.

  Recently, however, there has been a rapid increase in interest, research and development regarding vehicle black boxes (Vehicle Black Box or Event Data Recorder) due to the rapid increase in the car penetration rate and the accompanying sudden increase in the car accident rate. is there.

  Actually, the annual sales of black boxes for vehicles in the market was about 66,000 units (about 12 billion won) in 2008, but in 2009 it was about 100,000 units (about 20 billion won). It is expected to increase. In Korea, the Ministry of Construction and Transportation, the Technical Standards Institute, and the Telematics Association are preparing a standard plan for a vehicle black box, and a bill to obligate the installation of a vehicle black box, mainly for commercial vehicles, is 2011. Legislation is expected in the year.

  This is a global trend. For example, in the case of the United States, the Department of Transportation (DOT) has proposed the 2004 Black Box Standard Draft, and the National Highway Traffic Safety Administration (NHTSA) 9/2008. From the month, the American Automobile Engineers Association (SAE) and the International Institute of Electrical and Electronics Engineers (IEEE) recommended a recommendation to install a black box for vehicles on imported mini vehicles. Announcement of a standard black box for vehicles. In the case of Europe, the United Nations Economic Commission for Europe (UNECE) is proceeding with the establishment of a standard black box for vehicles as a compulsory mutual import / export standard. The European Union (EU) Since 2009, a bill has been finalized that requires all vehicles in the EU to be equipped with black boxes. In the case of Japan, the black box has been mandatory for some models since 2008. In China, the digital travel recording device for all vehicles has been mandatory in 2008.

  Coupled with this global trend, there is a growing interest in the security issues of data stored in black boxes. If the data stored in the black box is easily forged or altered by an attacker, the purpose of the black box technology is such that the data becomes unreliable due to concerns about data distortion and the legal evidence cannot be recognized. It is because it becomes impossible to achieve.

  However, existing black box technology for vehicles is only focused on collecting and storing vehicle internal / external sensing data or reconstructing accident situations via data stored in the black box. ing. In other words, the existing technology has a problem that it is very vulnerable to black box data forgery or alteration by an attacker.

  In particular, in the case of vehicle data stored in a black box, the technology that guarantees data integrity in real time in order to prevent forgery and alteration of vehicle data from the characteristics that are collected and stored in real time. Is required. However, the existing technology still has a problem in that it cannot provide a solution that can guarantee the integrity of vehicle data in real time.

  Further, the existing technology has a problem in that it cannot provide a non-repudiation, an error recovery function, etc. regarding data stored in the black box.

  The first technical problem to be solved by the present invention is to guarantee the integrity of the vehicle data stored in the black box in real time, as well as to ensure the integrity of the vehicle data that supports the non-repudiation prevention and error recovery functions. Is to provide a device.

  The second technical problem to be solved by the present invention is to guarantee the integrity of the vehicle data stored in the black box in real time, as well as to ensure the integrity of the vehicle data that supports the non-repudiation prevention and error recovery functions. Is to provide a method.

  A third technical problem to be solved by the present invention is to provide a vehicle black box system using the vehicle data integrity guarantee apparatus and method.

  In order to solve the first technical problem described above, the present invention provides a data blocking unit that divides an input data stream related to vehicle sensing information into block data of a predetermined size; An IAD generation unit that generates initial authentication data (IAD) by signing the block data with a signing key; sequentially, a first hash value for each of the divided block data Generating a first hashing unit that generates a first hash value for the current block data by concatenating and hashing a value of the current block data and a first hash value for the immediately preceding block data; Hashing the first hash value for the current block data Therefore, a second hash value is generated, and a second hashing unit that outputs the second hash value as integrity verification data related to the current block data is included, and the first hashing unit includes a first hash value related to the first block data. A real-time vehicle data integrity guarantee device using the IAD value as a hash value is provided.

  In one embodiment, the IAD generating unit generates the IAD using a signature key issued from a third trust party.

  In one embodiment, the IAD generating unit is implemented by a smart card that incorporates the signature key and guarantees the security of the signature key.

  In one embodiment, the IAD generation unit includes a memory unit that stores the signature key and the generated IAD.

  In one embodiment, the real-time vehicle data integrity guarantee device further includes a first storage unit for storing a first hash value generated by the first hashing unit, wherein the first hashing unit includes the first hashing unit. A first hash value related to the current block data is generated using the first hash value related to the previous block data stored in the storage unit.

  In one embodiment, the first storage unit stores the IAD value as a first hash value for the first block data.

  In one embodiment, the first storage unit deletes the first hash value related to the immediately preceding block data when storing the first hash value related to the current block data.

  In one embodiment, the real-time vehicle data integrity guarantee device further includes a second storage unit that stores integrity verification data regarding each block data output by the second hashing unit.

  In order to solve the second technical problem described above, the present invention is a method in which a vehicle black box for collecting and storing vehicle data related to vehicle sensing information guarantees the integrity of the vehicle data in real time. A data blocking step of dividing an input data stream related to vehicle sensing information into block data of a predetermined size; initial authentication data IAD signed with a signature key for the first block data of the input data stream; IAD generation step for generating the first hash value for each of the divided block data, and hashing is performed by concatenating the value of the current block data and the first hash value for the immediately preceding block data. The current block data A first hashing step for generating one hash value; generating a second hash value by hashing the first hash value for the current block data, and the second hash value for the integrity verification data for the current block data The first hashing step provides a method for guaranteeing the integrity of real-time vehicle data, which is a step of using the IAD value as a first hash value for the first block data.

  In order to solve the third technical problem described above, the present invention is a vehicle black box system that collects and stores vehicle data related to vehicle sensing information, and determines an input data stream related to vehicle sensing information in advance. A data blocking unit that divides the block data into a block data of a predetermined size; an IAD generation unit that generates initial authentication data IAD by signing a first block data of the input data stream with a signature key; In the sequential generation of the first hash value for each of the block data, the first block for the current block data is hashed by concatenating and hashing the value of the current block data and the first hash value for the immediately preceding block data. A first hashing unit for generating a hash value; A second hashing unit that generates a second hash value by hashing a first hash value related to the block data, and outputs the second hash value as integrity verification data related to the current block data; The hashing unit provides a vehicle black box system that uses the IAD value as a first hash value for the first block data.

  In one embodiment, the IAD generating unit is implemented by a smart card that incorporates a signature key issued from a third trusted authority and guarantees the security of the signature key.

  In one embodiment, the black box system for a vehicle further includes a data storage unit that stores integrity verification data regarding each block data output by the second hashing unit.

  In one embodiment, the data storage unit further stores the block data corresponding to the integrity verification data.

  The present invention provides an advantage of guaranteeing the integrity of vehicle data stored in a black box in real time by converting an input data stream into block data, performing signature with a signature key and superimposing hashing.

  In addition, by providing each vehicle black box with a unique and unique signature key, an advantage of supporting the non-repudiation function is provided.

  Further, it provides an advantage of supporting an error recovery function even when a vehicle data error occurs through a unique algorithm for generating integrity verification data.

1 is a block diagram illustrating an integrity guarantee device for real-time vehicle data according to an embodiment of the present invention. It is a flowchart which shows the integrity guarantee method of the real-time vehicle data which concerns on one Example of this invention. It is a figure which shows the block data and integrity verification data which are produced | generated by one Example of this invention. It is a figure which shows the calculation value produced | generated by one Example of this invention. It is a figure which shows the calculation value in the case of performing hashing once and generating integrity verification data. 1 is a block diagram showing a vehicle black box system according to an embodiment of the present invention.

  The present invention provides a data blocking unit that divides an input data stream related to vehicle sensing information into block data of a predetermined size; the first block data of the input data stream is signed with a signature key. An IAD generating unit for generating initial authentication data (IAD); in order to sequentially generate a first hash value for each of the divided block data, a value of the current block data and a first hash value for the immediately preceding block data; A first hashing unit that generates a first hash value related to the current block data by hashing the second hash value; and a second hash value generated by hashing the first hash value related to the current block data; The second hash value is used as the current block data. It includes a second hashing unit for outputting in integrity verification data relating to the first hashing unit uses the IAD value as a first hash value for the first block data.

  The present invention provides a data blocking step of dividing an input data stream related to vehicle sensing information into block data of a predetermined size; the initial block data of the input data stream is initially signed with a signature key IAD generation step of generating authentication data IAD; sequentially generating a first hash value for each of the divided block data, and concatenating a value of the current block data and a first hash value for the immediately preceding block data Hashing to generate a first hash value for the current block data; generating a second hash value by hashing the first hash value for the current block data; The hash value is changed to the current block. Includes a second hashing step of outputting in integrity verification data about data, the first hashing step uses the IAD value as a first hash value for the first block data.

(Mode for carrying out the invention)
Hereinafter, in order to clarify the solution of the technical problem of the present invention, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, in the description of the present invention, if the description of the known technology rather obscures the gist of the present invention, the description will be omitted. Moreover, the term mentioned later is a term defined in consideration of the function in this invention, and this may change with intentions, customs, etc. of a user, an operator, etc. Therefore, the definition must be made after taking into account the contents of the entire specification.

  FIG. 1 is a block diagram showing a real-time vehicle data integrity guarantee device according to an embodiment of the present invention.

  FIG. 2 is a flowchart showing a method for ensuring the integrity of real-time vehicle data according to an embodiment of the present invention.

  Referring to FIGS. 1 and 2, the real-time vehicle data integrity guarantee device 100 includes a data blocking unit 110, an IAD generation unit 120, a first hashing unit 130, and a second hashing unit 140, and a data storage unit 150. Can further be included.

  First, the data blocking unit 110 divides an input data stream related to vehicle sensing information into block data having a predetermined size (S210). This is due to technical considerations for processing the input data stream related to vehicle sensing information in real time.

  Next, the IAD generation unit 120 generates initial authentication data (IAD) by signing the first block data of the input data stream with a signature key (S220). In one embodiment, the IAD generating unit 120 may be implemented as a smart card that incorporates the signature key sk and guarantees the security of the signature key sk. Such a smart card is embedded with a semiconductor chip equipped with an IC memory and a central processing unit (CPU), and has excellent security functions such as encryption processing, authentication of connection target, management of stored data, and safety. It is expensive and cannot be counterfeited. At this time, the smart card 120 can be issued from a third trust party (TTP), for example, a government agency at the time of purchasing a black box equipped with the integrity guarantee device 100 or at the time of vehicle registration. is there. The signature key sk is uniquely assigned to the integrity guarantee device 100 or a black box having the signature guarantee device 100, and can be issued together from the third trusted authority when the smart card 120 is issued. In one embodiment, the integrity guarantee device 100 or a black box including the same can be provided with a communication module (not shown), and the signature key sk can be issued from the third trusted authority. In addition, the IAD generation unit 120 includes a secure memory unit (for example, an IC memory of a smart card) that stores the issued signature key sk and the generated IAD.

  Next, the first hashing unit 130 sequentially generates a first hash value for each of the divided block data, thereby obtaining a current block data value and a first hash value for the immediately preceding block data. By performing concatenation and hashing, a first hash value for the current block data is generated (S230 to S260). For this, the integrity guarantee device 100 may further include a first storage unit 152 that stores the first hash value generated by the first hashing unit 130.

  It should be noted that when the first block data is input, the first hashing unit 130 uses the value of the IAD generated by the IAD generation unit 120 as a first hash value related to the first block data. It is to use instead. This is because in the case of the first block data, there is no previous block data.

  More specifically, when the first block data is input (S230), the first hashing unit 130 uses the IAD value as the first hash value related to the first block data. (S240). In addition, when the second and subsequent block data are input (S230), the first hashing unit 130 concatenates the currently input block data value and the first hash value related to the immediately preceding block data. A first hash value for the current block data is generated by hashing (S250).

  The first hashing unit 130 stores the first hash value related to the current block data in the first storage unit 152 and generates the first hash value related to the next block data. The first hash value for block data is used. At this time, when the first storage unit 152 stores the first hash value related to the current block data, the first storage unit 152 deletes the first hash value related to the previous block data stored in the first storage unit 152 (S260). ). For example, when the first hash value related to the second block data is generated or stored in the first storage unit 152, the IAD that is the first hash value related to the immediately preceding block data, that is, the first block data. The value is deleted from the first storage unit 152. In addition, when the first hash value related to the third block data is generated or stored in the first storage unit 152, the first hash value related to the second block data is deleted from the first storage unit 152. To do. This is because a memory or data storage space such as the first storage unit 152 is generally easy for an attacker to approach, so that technical information such as the IAD is not unnecessarily exposed. This is due to consideration.

  Next, the second hashing unit 140 generates a second hash value by hashing the first hash value related to the current block data again, and uses the second hash value as the integrity of the current block data. The verification data is output (S270). At this time, the integrity guarantee apparatus 100 further includes a second storage unit 154, and can store the integrity verification data regarding each block data output by the second hashing unit 140 (S280).

  When the next block data is input (S290), the integrity guarantee device 100 repeats the steps (S250 to S280).

  In FIG. 1, the first storage unit 152 and the second storage unit 154 are separately implemented, but may be implemented with a single storage unit 150 in some embodiments.

  FIG. 3 shows block data and integrity verification data generated by an embodiment of the present invention.

As shown in FIG. 3, the present invention, the input data stream 300 related to the sensing information of the vehicle predetermined size of the block data; divided into (Block Data BDn), the respective divided block data BD _n was corresponding additional data (additional data; ADn; 310) , i.e., to produce a integrity verification data AD _n.

  FIG. 4 shows the operation values generated by one embodiment of the present invention.

As shown in FIG. 4, the integrity verification data AD _n generated according to an embodiment of the present invention is generated in the following process.

1. The first block data BD ₁ is input at the input of the IAD generation unit (for example, smart card; 120), is signed with the signature key sk, and is output. The signature value Sign _sk (BD ₁ ) is defined by IAD (Initial Authentication Data).

  2. The IAD is stored in a secure memory of the IAD generator 120.

3. Wherein the first hash value h ₁ about BD ₁ wherein IAD value is used, the BD ₁ regarding integrity verification data AD the BD ₁ second hash value for h ₁ to ₁ ', i.e., to hashing the IAD The value h (IAD) is stored.

4). The second block data BD ₂ first hash relates value h ₂ value h obtained by hashing by connecting the IAD and BD ₂ (IAD‖BD ₂₎ are stored.

5. The IAD is deleted from the storage unit when the h ₂ is generated.

6). Wherein the second hash value h ₂ 'about the BD ₂ value h obtained by hashing the h ₂ (h ₂₎ is stored.

7). That is, the the integrity verification data AD ₂ regarding BD ₂ wherein h ₂ 'is stored.

8). Third to the first hash value h ₃ for block data BD ₃ wherein h ₂ and BD ₃ to be linked hashed value h (h ₂ ‖BD ₃₎ are stored.

9. The h ₂ is deleted from the storage unit when the h ₃ is generated.

10. Wherein the second hash value h ₃ 'about BD ₃ value h obtained by hashing the h ₃ (h ₃₎ is stored.

11. That is, the the integrity verification data AD ₃ regarding BD ₃ wherein h ₃ 'are stored.

In the process of 12.8 to 11, the integrity verification data AD _n related to the block data BD _{n is} continuously generated and stored.

In the present invention, performing hashing twice to generate each integrity verification data AD _n is due to technical considerations for providing a more complete and efficient real-time data integrity guarantee technology. It is a thing.

  FIG. 5 shows calculation values in a case where integrity verification data is generated by performing one hashing.

As shown in FIG. 5, when the integrity verification data AD _n is generated by only one hashing, for example, when h ₂ is stored in the integrity verification data AD ₂ related to the second block data BD ₂ , until AD ₂ is not able to produce the attacker, the third from the integrity verification data AD ₃ for block data BD _3, first hash value h _n-1 of the previous block data, for example, h ₂ is The problem arises that it is exposed and can be generated by an attacker.

On the other hand, _if the IAD is connected to the block data BD _n after the BD _2, it is possible to guarantee the integrity of the data by only one hashing logically. However, in such a case, the result is that the IAD is continuously exposed on the memory of the storage unit, which causes a problem that an attacker can forge or alter the AD _n value.

Therefore, in order to prevent the above-mentioned problems, the present invention guarantees data integrity by performing hashing twice in generating each integrity verification data AD _n . The point to be noted here is that in actual implementation, the hash function is capable of high-speed calculation and has little influence on the calculation performance.

  FIG. 6 is a block diagram showing a vehicle black box system according to an embodiment of the present invention.

  As shown in FIG. 6, the vehicle black box system 600 includes a sensor unit 610 that senses various information inside and outside the vehicle, and a black box that collects and stores information sensed by the sensor unit 610. 630 can be included.

  The sensor unit 610 may include various sensors for sensing various information inside and outside the vehicle. For example, an image sensor 612 that captures images around the vehicle, an audio sensor 614 that records internal and external sounds of the vehicle, an acceleration sensor 616 and an angular velocity sensor 618 that sense changes in vehicle speed, rotation, and the like, An impact sensor 620 that detects the presence or absence of a collision may be included.

  The black box 630 stores an input interface 632 that converts a sensing signal sensed by the sensor unit 610 into a digital data stream, an integrity guarantee unit 100 that guarantees integrity of input data in real time, and data. A data storage unit 634 may be included.

  For detailed components and operations of the integrity guarantee unit 100, refer to the detailed description of the integrity guarantee device 100 for real-time vehicle data according to the present invention described above.

As described above, the IAD generation unit 120 of the integrity guarantee unit 100 includes a signature key sk issued from a third trust organization TTP, and is implemented as a smart card that guarantees the security of the signature key sk. obtain. In this case, the signature value IAD generated by the smart card 120 is obtained only from the integrity guarantee unit 100 and cannot be arbitrarily obtained even by the vehicle owner. Eventually, only the third trust authority TTP that issued the signature key sk has a public key pk for signature verification corresponding to the signature key sk, and only the third trust authority TTP performs data integrity verification. be able to. For example, after calling the IAD value from the smart card, the third trusted authority TTP performs signature verification with the public key pk corresponding to the signature key sk, and if the signature verification passes, the integrity verification Hashing is performed on the block data BD _{n in the} same order as the generation process of the data AD _n , and the generated value AD _n ′ is compared with the value of the integrity verification data AD _n . Data integrity can be verified.

The data storage unit 634 stores the block data BD _n as original data corresponding to the integrity verification data AD _n . In one embodiment, the first storage unit 152, the second storage unit 154, or both the first and second storage units 152, 154 of the integrity guarantee unit 100 are integrated into the data storage unit 634. And a single storage unit. In one embodiment, the amount of data stored in the data storage unit 634 can be limited by a first-in first-out method in consideration of the storage capacity of the data storage unit 634. That is, new input data can be stored while deleting old storage data. At this time, if the sensing information sensed by the sensor unit 610 indicates an emergency situation of the vehicle such as an accident, theft, or failure, the data storage unit 634 indicates the time when the data stored in the situation is stored. It can be embodied to save regardless.

  In one embodiment, the integrity guarantee unit 100 is implemented by a system on chip technology on a black box ECU (Electronic Control Unit; not shown) that controls a black box for a vehicle. Then, the black box ECU can guarantee the integrity of the vehicle data stored in the vehicle black box in real time. When the present invention is implemented with a single microprocessor chip, there are advantages that the size of various systems can be reduced, the assembly process can be simplified, and the manufacturing cost can be reduced.

  Further, the present invention can be embodied as program code that can be read by a computer on a computer-readable recording medium according to an embodiment. When the present invention is implemented via software, the constituent means of the present invention are code segments that perform the necessary work. Also, the program or code segment can be stored in a computer processor readable medium or transmitted in a computer data signal associated with a carrier wave via a transmission medium or a communication network.

  Computer-readable recording media include all types of recording devices that store data read by a computer system. For example, the computer-readable recording medium includes ROM, RAM, CD-ROM, magnetic tape, flexible disk, optical data storage device, and the like. The computer-readable recording medium is distributed to computer systems connected via a network, and the computer-readable code can be stored and executed in a distributed manner.

  Hereinafter, the remarkable effects of the present invention will be analyzed.

The present invention guarantees real-time integrity for data stored in a vehicle black box. That is, in FIG. 4, since the AD ₁ is a value obtained by hashing the signature value IAD created using the signature key sk, the attacker can use the signature key sk stored in the smart card 120 and the signature key sk. IAD is not known and AD ₁ cannot be generated. The IAD value can only be called by the third trusted authority TTP. Further, since the IAD cannot be generated, the h ₂ and h ₂ ′ cannot be generated, which means that AD ₂ cannot be generated. Also, since h ₂ cannot be generated, h ₃ and h ₃ ′ cannot be generated, which means that AD ₃ cannot be generated. Based on the same principle, the attacker cannot generate subsequent AD _n . Furthermore, the characteristics of the hash function, for h _n value is not known a pre-image (Pre-image) values of h _n ', forged intermediate values are also possible.

  In addition, the present invention supports a non-repudiation function because each black box system has a unique signature key.

In addition, the present invention supports an error recovery function even when an error occurs due to an external impact, an electrical signal error, a radio wave interference, or the like after the integrity verification data AD _n is stored. In other words, even when an error occurs in the AD _n-1 value and the integrity of AD _n cannot be verified, the IAD value can be known, so that all the remaining blocks can be verified.

Further, the present invention supports partial error recovery when the input data stream is related to moving image data even if an error occurs after the block data BD _n is stored. That is, when an error occurs in a particular block data BD _n, in case you can not integrity verification according with future block data, a signature for each of the moving image data I-frame (Intra frame). Such generated signature value is stored separately and integrity verification data AD _n. Since the I-frame can be decoded and converted into an image in the future, even if an error occurs in the moving image data, it is possible to verify the integrity of the still video image every second. Become.

  As described above, the present invention provides the advantage of supporting non-repudiation and error recovery functions as well as ensuring the integrity of vehicle data stored in the black box in real time.

  The present invention has been described with reference to the embodiments. However, it should be understood by those skilled in the art that the present invention can be embodied in a modified form without departing from the essential technical idea of the present invention. Accordingly, the disclosed embodiments are to be considered from an illustrative, rather than a limiting, perspective. That is, the true technical scope of the present invention is set forth in the appended claims, and all differences within the equivalent scope should be construed as being included in the present invention.

  The present invention can be embodied in one module of a black box for a vehicle.

Claims (15)

A data blocking unit for dividing an input data stream relating to vehicle sensing information into block data of a predetermined size;
An IAD generating unit that generates initial authentication data (IAD) by signing the first block data of the input data stream with a signature key;
In the sequential generation of the first hash value for each of the divided block data, the current block data is hashed by concatenating the value of the current block data with the first hash value for the immediately preceding block data. A first hashing unit for generating a first hash value for data;
A second hashing unit that generates a second hash value by hashing a first hash value related to the current block data, and outputs the second hash value as integrity verification data related to the current block data;
The first hashing unit uses the IAD value as a first hash value relating to the first block data, and the integrity guarantee device for real-time vehicle data.   2. The real-time vehicle data integrity guarantee device according to claim 1, wherein the IAD generation unit generates the IAD using a signature key issued from a third trust organization.   The real time vehicle data integrity guarantee device according to claim 2, wherein the IAD generation unit is implemented by a smart card that incorporates the signature key and guarantees the security of the signature key.   The real-time vehicle data integrity guarantee device according to claim 3, wherein the IAD generation unit includes a memory unit that stores the signature key and the generated IAD. The real-time vehicle data integrity guarantee device further includes a first storage unit that stores the first hash value generated by the first hashing unit,
The first hashing unit generates a first hash value related to current block data using a first hash value related to immediately preceding block data stored in the first storage unit. The device for ensuring the integrity of real-time vehicle data as described.   6. The real-time vehicle data integrity guarantee device according to claim 5, wherein the first storage unit stores the IAD value as a first hash value relating to the first block data.   The real time vehicle data according to claim 6, wherein the first storage unit deletes the first hash value related to the immediately preceding block data when storing the first hash value related to the current block data. Integrity guarantee device.   The apparatus of claim 1, wherein the real-time vehicle data integrity guarantee device further includes a second storage unit that stores integrity verification data regarding each block data output by the second hashing unit. Real-time vehicle data integrity guarantee device. A vehicle black box for collecting and storing vehicle data related to vehicle sensing information is a method for guaranteeing the integrity of the vehicle data in real time,
A data blocking step of dividing an input data stream relating to vehicle sensing information into block data of a predetermined size;
An IAD generation step of generating initial authentication data (IAD) by signing the first block data of the input data stream with a signature key;
In the sequential generation of the first hash value for each of the divided block data, the current block data is hashed by concatenating the value of the current block data with the first hash value for the immediately preceding block data. A first hashing step for generating a first hash value for the data;
Generating a second hash value by hashing a first hash value associated with the current block data, and outputting the second hash value as integrity verification data associated with the current block data;
The first hashing step is a step of using the IAD value as a first hash value relating to the first block data, and a method for ensuring the integrity of real-time vehicle data.   The real time vehicle data integrity guarantee method according to claim 9, wherein the IAD generation step is a step of generating the IAD using a signature key issued from a third trust organization. The real-time vehicle data integrity guarantee method further includes a first storage step of storing the first hash value generated by the first hashing step,
The first hashing step is a step of generating a first hash value relating to current block data using a first hash value relating to immediately preceding block data saved in the first saving step. Item 10. A method for guaranteeing integrity of real-time vehicle data according to Item 9.   12. The method for guaranteeing integrity of real-time vehicle data according to claim 11, wherein the first storing step is a step of storing the IAD value as a first hash value relating to the first block data.   The real time according to claim 12, wherein the first storing step is a step of deleting the first hash value related to the immediately preceding block data when storing the first hash value related to the current block data. Vehicle data integrity guarantee method.   The method of claim 9, wherein the real-time vehicle data integrity guarantee method further includes a second saving step of saving integrity verification data regarding each block data output by the second hashing step. A method to guarantee the integrity of real-time vehicle data.   A computer-readable recording medium having recorded thereon a program for executing the method according to any one of claims 9 to 14.

Images